HAProxy ALOHA
Hardware Load Balancer

PacketShield

ALOHA is bundled with PacketShield, our patented anti-DDoS solution that filters packets at a line rate up to 10 Gbps and outperforms other firewall software, including Netfilter / iptables. Even during heavy load, it adds almost no latency. It uses both stateless and stateful packet filtering to protect the load balancer and the servers behind it.

PacketShield protects your network from TCP floods, including ACK, RST and SYN floods, and also DNS reflection attacks, using ultra-fast inspection and generating responses at the driver level. By maintaining its own session table, it learns which packets are legitimate and can then deflect attacks before they reach your server’s network stack, with zero false-positives.

It provides real-time metrics, giving you insight into the volume of traffic filtered, which can be fed into the monitoring software you choose. This can easily be added onto your hardware HAProxy ALOHA and is enabled with the ALOHA UI.

HAProxy Enterprise WAF

HAProxy ALOHA includes the next-generation HAProxy Enterprise WAF powered by our Intelligent WAF Engine that provides exceptional accuracy and zero-day threat detection, very low latency, optional OWASP Core Rule Set (CRS) compatibility, and simple management with effective out-of-the-box protection. Block SQL injection (SQLi) attacks, cross-site scripting (XSS), remote code execution, and other common threats with industry-leading balanced accuracy and easy observability.